Disable LAPS

 

Turn all items to disabled in LAPS GPO 

 

Remove LAPS passwords

Get-ADComputer -Filter * -SearchBase “OU=Servers,DC=mydomain,DC=com” | Set-ADComputer -clear ‘ms-mcs-AdmPwd’,‘ms-Mcs-AdmPwdExpirationTime’

 

Export password list

Get-ADComputer $computer -Properties ms-Mcs-AdmPwd | fT ms-Mcs-AdmPwd #Export-Csv -Path 'C:\Pwd.csv'

 

VMWare vSphere: Managing Password Expiration Settings - VCenter

 You will need the dir-cli tool, which is located in /usr/lib/vmware-vmafd/bin/.

cd /usr/lib/vmware-vmafd/bin/

Check that the local user exists:

./dir-cli user find-by-name --account backup_user

You can change the password for this user:

./dir-cli password reset --account backup_user --password OldBackupP@$$ --new NewBackupP@$$

Or you can set password to never expire:

./dir-cli user modify --account backup_user --password-never-expires

You can change the password expiration settings for root or set it to never expire (if its value is 0).

Also you can check the root password expiration setting from your vCSA console:

chage -l root

source: https://woshub.com/vmware-password-expiration-settings/

Entire OU set password never expires

 

dsquery user “OU={your target OU},DC={your domain},DC={your domain extension}” | dsmod user -pwdneverexpires yes

Update: Note: If your OU has more than 100 users in it you need to add the ‘-limit’ flag, and set it to a number greater than your actual amount of users, e.g.

dsquery user “OU={your target OU},DC={your domain},DC={your domain extension}” -limit 2000 | dsmod user -pwdneverexpires yes